CVE-2024-30850

This repository contains a functional exploit for CVE-2024-30850, which leverages an XSS vulnerability (CVE-2024-31839) to achieve remote code execution on the CHAOS RAT v5.0.1 web panel. The exploit spoofs an agent callback to trigger the XSS, then uses command injection to execute arbitrary commands on the server.

This Metasploit module exploits an XSS-to-RCE vulnerability in Chaos RAT v5.0.8 by leveraging either direct authentication, a JWT token, or an agent binary to execute commands on the target system. The exploit chains an XSS vulnerability (CVE-2024-31839) with an RCE vulnerability (CVE-2024-30850) to achieve remote code execution.